A published statement that an issuer holds assets against its outstanding obligations at a stated moment. The statement, abbreviated PoR, sets the assets an issuer controls against the total it owes holders, measured at a single timestamp and usually accompanied by a report from an independent accounting firm describing the procedures performed. It is a reconciliation, not an audit opinion, and it addresses the issuer’s aggregate position rather than any one holder’s entitlement. Practice standardised in digital-asset markets after 2022. Statute followed in 2025, for one narrow category of issuer — payment stablecoins — leaving every other kind of token, commodity-referenced ones included, on the voluntary footing the format started from.
The two totals a reserve statement reconciles
The assets side counts what the issuer controls: on-chain addresses, and off-chain positions such as bank deposits, short-dated instruments or metal in a vault. On-chain control is demonstrated by signing a message from each address, or by moving a nominal amount. Off-chain reserves cannot be demonstrated that way; they enter the reconciliation as a confirmation from the bank, custodian or vault operator holding them, which the reader takes on the strength of the confirming institution.
The liabilities side is the harder half, and it is where the format’s limits sit. What holders are owed comes out of the issuer’s own books. The Merkle tree that most implementations use assigns every account a leaf carrying a hashed identifier and a figure; leaves hash in pairs up to a single published root, and a holder checks that their own leaf is in the tree. That proves inclusion. It does not prove completeness: an account left out of the tree leaves no mark on the root, and neither does an obligation that never sat in the account system — a loan against the reserve, a pledge, an intercompany balance. Zero-knowledge constructions now used by several venues prove that total liabilities are covered without exposing individual figures. They improve privacy. They do not change what the issuer chose to put into the total.
Four kinds of reserve statement, and what each closes
| Route | Who stands behind it | Cadence | What it leaves open |
|---|---|---|---|
| Self-published reserve page or address list | The issuer alone | Continuous or ad hoc | No independent party; the issuer defines the scope and the timestamp |
| Independent accountant’s report at a point in time | An accounting firm under attestation standards (AICPA criteria in the US, ISAE 3000 elsewhere) | Monthly or quarterly | The procedures are agreed in advance and reported on; this is not a financial-statement audit |
| Continuously published on-chain reserve feed | An oracle network reading reserve accounts and writing the result on-chain | Near-continuous | Asset side only; anything held off-chain enters as a figure someone else reported |
| Statutory reserve report | Required by law and examined by a registered public accounting firm | Monthly | Applies only to the issuer categories the statute names |
The four are often described interchangeably as “proof of reserves”. They differ in who is exposed if the figure is wrong: nobody, an accounting firm under professional standards, an oracle network’s data sources, or an issuer’s chief executive and chief financial officer signing a certification to a bank regulator.
How a point-in-time proof of reserves is produced
- The cut-off is fixed. A timestamp is chosen — a month-end, a block height — and every figure in the exercise refers to that instant. Nothing before or after it is in scope.
- Assets are enumerated and control demonstrated. The issuer supplies its address list and signs from each address. Off-chain holdings are confirmed by the institution holding them.
- Liabilities are extracted and committed. Account balances are exported, hashed into a Merkle tree, and the root is published so that the total cannot be edited afterwards without detection.
- The two totals are compared. The output is a ratio per asset — reserves held against obligations recorded — at the cut-off.
- An independent firm reports on the procedures. The report names what was tested and what was not, and is addressed to the issuer that engaged it.
- The result is published with a self-check. Holders are given a tool that confirms their own leaf sits under the published root.
Steps 1 to 4 are performed by the issuer. Step 5 is performed on the issuer’s instructions, to a scope agreed with the issuer. That sequence is the reason the scope paragraph, not the headline ratio, is the part of a reserve statement worth reading.
What sets the cadence, and what the exercise costs
Monthly publication is now the market norm and, for one category of issuer, the legal one. The GENIUS Act, signed 18 July 2025, requires a permitted payment stablecoin issuer to publish the composition of its reserves every month, to have that month-end report examined by a registered public accounting firm, and to have its chief executive and chief financial officer certify its accuracy to the regulator. Rehypothecation of reserve assets is prohibited, with narrow exceptions. Audited annual financial statements are required only above 50 billion dollars of outstanding issuance.
The implementing rules put dates on that machinery. The Office of the Comptroller of the Currency published its proposal in the Federal Register on 2 March 2026: the monthly report goes up by noon on the last day of each month for the prior month-end, examined on the same timeline; a reserve shortfall halts new issuance until it is cured; fifteen consecutive business days out of compliance forces liquidation of reserve assets and redemption of the outstanding coins. The Federal Deposit Insurance Corporation approved an aligned proposal on 7 April 2026, with a prescribed reserve-composition template and a written report of findings to the issuer’s audit committee or board. Both remain proposals: the agencies missed the statute’s 18 July 2026 rulemaking deadline, the Comptroller of the Currency said in August 2026 that the OCC expects to finalise by November 2026, and the Act’s effective date is expected to be 18 January 2027. Until then, every reserve statement published in the United States — including the ones that already run to dozens of consecutive monthly editions — is a voluntary document.
In the European Union the obligation is already live and reaches further. Article 30 of the Markets in Crypto-Assets Regulation requires an issuer of an asset-referenced token to disclose on its website the amount in circulation and the value and composition of the reserve of assets, updated at least monthly; Article 22 adds quarterly reporting to the competent authority — holder numbers, value issued, size of the reserve, daily transaction averages — for tokens above 100 million euro in issue value.
Cost tracks scope rather than headline: the number of assets and entities in the perimeter, the number of accounts in the liabilities tree, the frequency, the number of off-chain confirmations that have to be obtained from third parties, and the procedures the firm is engaged to perform. No published tariff exists for these engagements and none is given here.
What the accountant actually signed
The document is a report on procedures, addressed to the issuer, carrying a scope paragraph and a date. It is not an audit opinion, and no audit regulator stands behind it. The Public Company Accounting Oversight Board’s Office of the Investor Advocate said as much in March 2023: proof-of-reserve engagements are not audits, are not within the Board’s oversight, and the procedures performed are unlikely to address the entity’s liabilities, the rights and obligations of the asset holders, or whether the assets counted had been borrowed to make the position look collateralised. The Board went further in February 2024, proposing a rule against firms citing their registration in marketing for work — proof-of-reserve attestations among the examples — that the Board does not inspect.
Two practical consequences follow. A named accounting firm on a reserve statement establishes that procedures were performed, not that a regulator reviewed them. And the entity that engages the firm also sets the scope, which is why two statements bearing similar ratios can cover materially different perimeters.
Where a gold-backed token’s reserve sits
For a currency-backed token the reserve is financial and largely visible: deposits and short-dated instruments, confirmable by the institutions holding them. For a commodity-referenced token the reserve is metal in a vault. The on-chain half of the exercise proves how many tokens exist. The metal half rests entirely on the vault operator’s statement and the bar list behind it — weight, fineness, refiner, serial numbers — which no holder can verify cryptographically and most never see. The verification the reader can perform and the verification that matters are on opposite sides of the reconciliation.
The legal position splits along the same line. The GENIUS Act’s definition of a payment stablecoin turns on a token pegged to a fixed amount of monetary value and redeemable at par, which places commodity-referenced tokens outside it: the monthly examined report and the executive certification do not attach to them at all. In the European Union the same product is an asset-referenced token and Article 30 does attach. One product, two of the largest regimes, opposite answers on whether the reserve statement is a filing or a courtesy. A further tension sits underneath: the European Banking Authority has noted that where a token references assets that are not highly liquid financial instruments — commodities among them — holding those assets in the reserve can pull against the liquidity objective the reserve is also required to serve.
Scale makes the question current rather than academic. CoinGecko’s RWA Report 2026 puts spot trading in tokenised gold at 90.7 billion dollars in the first quarter of 2026, against 84.6 billion dollars across the whole of 2025.
What goes wrong
Assets borrowed for the timestamp. A reserve that exists at the cut-off and not the day after satisfies the exercise as designed. This is the specific defect the audit regulator named, and it is structural to any snapshot, which is what continuous feeds are built to answer.
Liabilities that never entered the tree. Omitted accounts, obligations booked outside the account system, or metal already pledged. Inclusion proofs cannot surface any of them; the holder verifying their own leaf learns nothing about what else the issuer owes.
Perimeter drift. Statements that cover certain assets, certain entities or certain jurisdictions, with the exclusions stated in the scope paragraph and absent from the summary.
The off-chain leg. Metal, deposits and custodial positions enter as reported figures. A reserve statement over an off-chain asset is a statement about a document.
Assurance read into the format. A ratio above 100 per cent, an accounting firm’s name and a monthly cadence read as regulated verification of solvency. The report says what it tested; solvency, priority in insolvency and internal control are not in it.
Terms it is confused with
An attestation is a report by an independent party on what it observed at a point in time; an audit is an opinion on whether financial statements are fairly stated. A proof of reserves is a particular kind of attestation, scoped to holdings against obligations. A vault audit is narrower still and physical: an inspection of specific bars against a specific record, by serial number, weight and fineness. A reserve statement measures a pool; a vault audit measures identified metal. The distinction between allocated and unallocated holding is the same distinction seen from the holder’s side.
Why allocated bars produce no proof of reserves
Proof of reserves exists because holders share an undivided claim on a pool. Where many holders are owed out of one stock of assets, the only meaningful number is the ratio between the two totals, and the only way to publish it is in aggregate. The format is an answer to pooling, and it is the correct answer to that question.
Title to identified bars removes the question rather than answering it. There is no ratio to publish, because there is no pool: the bars are not the seller’s assets and are not available to the seller’s creditors, and there is no outstanding obligation to be covered by them. The corresponding evidence is issued to one counterparty rather than published to all of them — an allocation record naming specific bars by serial number, weight, fineness, producer and location, a dedicated client sub-account at the vault operator in which that counterparty is named in the vault register, and bars segregated from the seller’s own stock. Golden Ark Reserve coordinates that placement through Brink’s Hong Kong and Brink’s Singapore; the bars sit in the counterparty’s name in the operator’s register, not in a reserve total.
So the diligence question changes shape. Against a pooled position it is: what is the ratio, when was it measured, what did the scope paragraph exclude, and who is exposed if the figure is wrong. Against an allocated position it is: which serial numbers, in whose name, in whose register, segregated from whose stock, and what does the operator’s own record say. An aggregate figure and a bar-level record fail in opposite directions — a correct ratio says nothing about where one holder ranks if the issuer fails, and a correct bar list holds up even when the seller is in difficulty, because the metal was never the seller’s to distribute.
The physical market’s own published aggregate shows how little an aggregate can carry. The London Bullion Market Association publishes London vault holdings on the fifth business day of each month for the previous month-end: 9,534 tonnes of gold at end July 2026, valued at 1.2 trillion dollars, across approximately 762,723 bars. The figure is one month in arrears, it names no owner, and the bar count is not an inventory at all — it is the tonnage divided by an assumed 12.5 kg standard bar. It is the most transparent aggregate reserve figure in bullion, and no holder’s entitlement is anywhere in it.
Placement, segregation and the records that evidence a specific counterparty’s bars are set out on Gold Storage.